Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
File: XFe2FhFxnsfI4AErGv9-gfx2ib0.mft (raw, json)
Hash identifier: c1U1D+GjOH3LwcI/rgpbIH2oBivLDLZw3gyikzutuqs=
Subject key identifier: 5A:DA:86:DC:7E:32:5A:2B:5D:98:96:6B:BF:9D:F6:1C:57:C6:D4:E5
Authority key identifier: 5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
Certificate issuer: /CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Certificate serial: 019A4F62289AA8EE495E8EC5698870A6B4DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
Manifest number: 1108
Signing time: Tue 04 Nov 2025 15:00:24 +0000
Manifest this update: Tue 04 Nov 2025 15:00:24 +0000
Manifest next update: Wed 05 Nov 2025 15:00:24 +0000
Files and hashes: 1: 736mr1KkVtoBPW1oR7owGe-ullo.roa (hash: uR2lVV+jre6sPLOQey9198pgiqdr//RLVlkZmwpBaQw=)
2: XFe2FhFxnsfI4AErGv9-gfx2ib0.crl (hash: rAuz59vRnfGBwwsK8nsY4gSN2GPeKp4j1FQTs2KzNKM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:62:28:9a:a8:ee:49:5e:8e:c5:69:88:70:a6:b4:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c57b61611719ec7c8e0012b1aff7e81fc7689bd
Validity
Not Before: Nov 4 15:00:24 2025 GMT
Not After : Nov 5 15:00:24 2025 GMT
Subject: CN=5ada86dc7e325a2b5d98966bbf9df61c57c6d4e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:86:77:e4:c0:1b:c3:5e:30:8f:e7:ad:7b:1d:
2d:14:59:97:b3:e7:bc:42:cf:c4:31:21:ac:8a:af:
d6:69:11:39:99:9d:5e:d3:fd:07:06:a2:78:9d:f5:
7c:f1:cb:cc:58:0e:b3:e9:d9:13:16:64:98:30:19:
ba:87:2a:42:93:c6:03:f2:83:11:2d:61:88:2d:1a:
42:b0:de:ea:89:ed:98:0a:ef:78:f8:d3:c4:57:bf:
27:29:36:76:87:16:99:1f:d9:8c:6a:00:f2:51:8e:
93:6d:bb:f4:2f:74:5d:a7:d0:7f:14:7b:63:1f:1a:
25:5b:39:02:8d:a4:56:05:29:b4:3a:d1:18:cb:35:
e0:7f:c9:99:fb:92:ec:f3:0f:45:89:8a:d8:b7:7b:
82:77:8d:40:b2:78:49:94:d8:cc:fa:d4:ce:73:98:
b6:85:6a:22:85:2e:3d:98:1c:c2:32:97:4b:2e:fb:
77:36:27:e6:e2:9a:d4:58:24:46:50:81:5e:92:43:
51:6f:ca:10:93:6a:a2:e5:f5:9b:b5:fa:11:7c:35:
50:a6:51:95:19:b4:45:ab:89:2d:50:d4:6e:24:6a:
1f:ce:cd:5e:c9:e1:5a:cc:1d:ea:b9:7d:83:3b:c3:
a4:3b:3e:a4:78:e1:b3:2b:ea:0b:98:ff:a2:b6:8a:
e0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:DA:86:DC:7E:32:5A:2B:5D:98:96:6B:BF:9D:F6:1C:57:C6:D4:E5
X509v3 Authority Key Identifier:
keyid:5C:57:B6:16:11:71:9E:C7:C8:E0:01:2B:1A:FF:7E:81:FC:76:89:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XFe2FhFxnsfI4AErGv9-gfx2ib0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/b7fe75-30ee-4a6f-b528-fa3071c435f1/1/XFe2FhFxnsfI4AErGv9-gfx2ib0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b0:b6:06:39:e6:9f:b3:95:c4:6e:0c:b3:8b:15:2e:24:0b:
72:30:89:a3:0d:8f:94:12:1d:40:af:ed:b4:da:99:06:3c:20:
8e:d8:93:03:3b:ce:c3:ff:a4:e2:d6:2b:06:29:6c:de:b8:a6:
a7:28:42:55:05:11:39:bf:0f:da:03:3d:79:d1:50:4e:11:d4:
09:37:5e:10:c0:de:3b:7e:d7:9f:5a:b7:d1:5e:1f:e0:66:84:
78:95:6a:ce:e8:f1:94:e3:f8:0b:c4:42:58:63:94:f6:e7:c3:
00:a8:4e:91:89:b4:90:da:00:3c:70:0b:68:2c:1a:7d:21:be:
e6:2d:0f:cf:36:a5:06:84:d8:c3:da:16:d5:f6:3f:89:d2:67:
b5:e8:9d:ea:57:8f:c5:1d:44:e5:18:ab:3f:02:1b:1c:d0:c9:
e8:ab:d9:a5:82:7b:9f:70:ff:06:c6:d9:f5:89:de:45:d2:87:
f4:00:94:54:ab:e8:d4:ab:81:86:b5:cd:8f:bf:65:d4:2e:02:
07:75:b2:b9:96:5d:be:6a:f6:d9:0e:f4:e3:73:b8:f3:fe:e1:
95:12:bd:6a:08:f3:19:e3:61:7d:94:50:76:eb:ab:8c:da:3f:
43:20:6f:01:68:2c:33:02:84:43:a9:b1:53:67:8d:4b:5b:ba:
84:13:bd:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 17:58:59 2025 by rpki-client